Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36613a3a2f34382d3438203d3e203539323832.roa
File: 323430303a643638303a36613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier: mQnW3DieNDEjXAqfs3NDRxQ0pueeWG5cMqkiSdMLVOY=
Subject key identifier: 7E:53:E2:19:B2:62:31:34:1C:29:E3:78:9D:2D:82:01:BC:54:DE:9F
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 1D6CCD8231117D633099E82DBF1AF71AB8304FD1
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36613a3a2f34382d3438203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 08:01:54 +0000
ROA not before: Mon 26 Sep 2022 07:56:54 +0000
ROA not after: Mon 25 Sep 2023 08:01:54 +0000
asID: 59282
IP address blocks: 2400:d680:6a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:6c:cd:82:31:11:7d:63:30:99:e8:2d:bf:1a:f7:1a:b8:30:4f:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 07:56:54 2022 GMT
Not After : Sep 25 08:01:54 2023 GMT
Subject: CN=7E53E219B26231341C29E3789D2D8201BC54DE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f3:94:45:96:b2:7e:d7:a0:3f:bc:6e:fa:be:
98:0f:36:70:5b:09:8a:8f:61:46:67:01:13:dd:78:
ed:ee:0c:b4:c7:c5:ba:b3:78:c4:74:a7:da:3c:7d:
d9:75:a4:82:f1:6d:90:35:ff:3d:a1:25:1c:0d:71:
11:a1:1c:d7:78:80:3a:47:ae:f1:da:f8:55:b5:11:
88:a6:53:4c:09:f2:00:81:63:d6:2c:bf:f6:d1:67:
65:60:0b:f1:9f:5c:53:8f:fd:b5:dd:1a:9f:5c:0c:
13:95:d6:39:a0:66:39:28:5b:a0:59:29:75:cf:70:
12:79:78:36:02:27:64:ae:ef:85:cd:7f:fe:18:80:
fd:86:5c:3b:02:56:f5:70:d7:95:e3:99:59:2e:11:
c2:88:42:42:1a:b3:86:2b:30:a6:e1:5f:8e:e7:1c:
69:be:5e:17:c6:cc:db:c1:0a:27:01:bf:27:c2:27:
f3:5c:3c:09:73:b0:e2:e0:4b:1f:ff:18:67:07:0f:
f2:1e:be:7c:d6:1b:0f:ef:36:08:ad:9d:b9:b6:69:
2b:37:82:f1:42:be:61:a1:52:f0:54:cc:75:5e:04:
07:35:e1:60:78:19:9e:c5:ce:45:0c:4d:b7:2d:f2:
24:34:81:a8:92:b0:4b:92:a1:aa:e5:ad:b6:eb:bc:
1a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:53:E2:19:B2:62:31:34:1C:29:E3:78:9D:2D:82:01:BC:54:DE:9F
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36613a3a2f34382d3438203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2400:d680:6a::/48
Signature Algorithm: sha256WithRSAEncryption
a3:dd:d1:7e:55:a7:c4:85:1a:cb:8d:be:98:2e:f4:5d:07:d9:
f8:24:08:04:fb:ea:39:c0:d4:a8:32:a8:87:dc:3d:a3:08:79:
40:03:5c:07:50:14:5d:d3:bf:e8:a5:6e:3d:dc:69:01:62:a3:
3b:e5:77:82:2b:35:bb:9f:e7:d3:cc:77:75:d2:f2:85:56:99:
d4:45:dc:6b:83:6c:22:62:3a:c0:8d:aa:2e:f5:73:70:59:c9:
ab:ef:26:b2:bf:d2:bc:d1:cb:3d:f0:9a:4f:2a:f6:55:33:4d:
01:1d:bd:39:29:ea:a8:95:38:91:79:9d:4e:0b:1d:64:74:a6:
f9:42:b7:52:88:2e:92:76:76:11:c8:e1:3b:5c:d8:ac:dd:9c:
a9:98:18:c6:2a:a4:99:d1:66:6e:3f:90:0b:e8:2d:cb:dc:f9:
4c:96:4d:f2:ed:25:e4:5b:e1:5e:09:de:4f:46:56:e2:56:16:
e5:7c:26:43:cf:6e:9d:5f:10:0c:cd:83:4e:fd:6f:8e:37:53:
a0:8a:74:e7:48:ee:09:13:15:6b:ff:25:11:ed:c2:89:d0:27:
20:b9:30:b4:7f:03:4a:e7:af:e3:1f:c1:90:21:34:be:fe:dc:
1d:77:5f:92:ba:b3:b2:d9:c5:b1:19:1f:63:39:94:a1:b4:a3:
62:a5:4b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org